@superdoc/sdk 2.7.0 → 2.9.0-next.1

package/README.md

@@ -25,6 +25,27 @@ await document.close();
 await client.dispose();
 ```
 
+For token-authenticated Hocuspocus or y-websocket rooms, pass the credential as
+an option on that document's open request:
+
+```js
+const document = await client.open(
+  {
+    doc: './contract.docx',
+    collaboration: {
+      providerType: 'hocuspocus',
+      url: 'wss://collaboration.example.com',
+      documentId: 'contract-123',
+    },
+  },
+  { collaborationAuth: { type: 'token', token: userToken } },
+);
+```
+
+The credential applies only to that open request. It is not part of the
+collaboration profile or command-line arguments. Per-open token authentication
+is not supported for Liveblocks or the standalone document host.
+
 See the [Node.js SDK guide](https://docs.superdoc.dev/agents/automation/node-sdk) for a complete workflow.
 
 ## License

package/dist/generated/client.d.ts

@@ -29333,6 +29333,7 @@ export interface DocOpenParams {
         url: string;
         documentId?: string;
         tokenEnv?: string;
+        headersEnv?: string;
         params?: Record<string, unknown>;
         syncTimeoutMs?: number;
         roomMode?: "join" | "create";

package/dist/generated/contract.cjs

@@ -17,6 +17,7 @@ const CONTRACT = {
                     "protocolVersion": "1.0",
                     "features": [
                         "cli.invoke",
+                        "collaboration.auth.perOpen",
                         "document.open",
                         "document.open.defaultChangeMode",
                         "document.currentRevision",
@@ -296902,6 +296903,10 @@ const CONTRACT = {
                                         "type": "string",
                                         "description": "Environment variable name containing the auth token."
                                     },
+                                    "headersEnv": {
+                                        "type": "string",
+                                        "description": "Environment variable name containing JSON WebSocket headers. Supported by y-websocket."
+                                    },
                                     "params": {
                                         "type": "object",
                                         "description": "Custom query parameters appended to the WebSocket URL. Values must be strings. Reserved keys: token.",
@@ -297149,6 +297154,10 @@ const CONTRACT = {
                                         "type": "string",
                                         "description": "Environment variable name containing the auth token."
                                     },
+                                    "headersEnv": {
+                                        "type": "string",
+                                        "description": "Environment variable name containing JSON WebSocket headers. Supported by y-websocket."
+                                    },
                                     "params": {
                                         "type": "object",
                                         "description": "Custom query parameters appended to the WebSocket URL. Values must be strings. Reserved keys: token.",

package/dist/generated/contract.js

@@ -2901,6 +2901,7 @@ export const CONTRACT = {
         "transport": "stdio",
         "features": [
             "cli.invoke",
+            "collaboration.auth.perOpen",
             "document.open",
             "document.open.defaultChangeMode",
             "document.currentRevision",
@@ -2931,6 +2932,7 @@ export const CONTRACT = {
                     "protocolVersion": "1.0",
                     "features": [
                         "cli.invoke",
+                        "collaboration.auth.perOpen",
                         "document.open",
                         "document.open.defaultChangeMode",
                         "document.currentRevision",
@@ -299816,6 +299818,10 @@ export const CONTRACT = {
                                         "type": "string",
                                         "description": "Environment variable name containing the auth token."
                                     },
+                                    "headersEnv": {
+                                        "type": "string",
+                                        "description": "Environment variable name containing JSON WebSocket headers. Supported by y-websocket."
+                                    },
                                     "params": {
                                         "type": "object",
                                         "description": "Custom query parameters appended to the WebSocket URL. Values must be strings. Reserved keys: token.",
@@ -300063,6 +300069,10 @@ export const CONTRACT = {
                                         "type": "string",
                                         "description": "Environment variable name containing the auth token."
                                     },
+                                    "headersEnv": {
+                                        "type": "string",
+                                        "description": "Environment variable name containing JSON WebSocket headers. Supported by y-websocket."
+                                    },
                                     "params": {
                                         "type": "object",
                                         "description": "Custom query parameters appended to the WebSocket URL. Values must be strings. Reserved keys: token.",

package/dist/index.cjs

@@ -113,6 +113,7 @@ class SuperDocClient {
     rawApi;
     defaultDocumentRuntime;
     handles = new Map();
+    pendingSessionIds = new Set();
     constructor(options = {}) {
         this.defaultDocumentRuntime = options.runtime;
         this.runtime = new process.SuperDocRuntime(options);
@@ -133,18 +134,27 @@ class SuperDocClient {
             ? { ...params, runtime: this.defaultDocumentRuntime }
             : params;
         const explicitSessionId = openParams.sessionId;
-        if (typeof explicitSessionId === 'string' && this.handles.has(explicitSessionId)) {
-            throw new errors.SuperDocCliError(`Session id already open in this client: ${explicitSessionId}`, {
-                code: 'SESSION_ALREADY_OPEN',
-                details: { sessionId: explicitSessionId },
-            });
+        if (typeof explicitSessionId === 'string') {
+            if (this.handles.has(explicitSessionId) || this.pendingSessionIds.has(explicitSessionId)) {
+                throw new errors.SuperDocCliError(`Session id already open in this client: ${explicitSessionId}`, {
+                    code: 'SESSION_ALREADY_OPEN',
+                    details: { sessionId: explicitSessionId },
+                });
+            }
+            this.pendingSessionIds.add(explicitSessionId);
+        }
+        try {
+            const result = (await this.rawApi.open(openParams, options));
+            const contextId = result.contextId;
+            const boundRuntime = new BoundRuntime(this.runtime, contextId);
+            const handle = new SuperDocDocument(boundRuntime, contextId, result, this);
+            this.handles.set(contextId, handle);
+            return handle;
+        }
+        finally {
+            if (typeof explicitSessionId === 'string')
+                this.pendingSessionIds.delete(explicitSessionId);
         }
-        const result = (await this.rawApi.open(openParams, options));
-        const contextId = result.contextId;
-        const boundRuntime = new BoundRuntime(this.runtime, contextId);
-        const handle = new SuperDocDocument(boundRuntime, contextId, result, this);
-        this.handles.set(contextId, handle);
-        return handle;
     }
     async describe(_params = {}, _options) {
         return introspection.describeContract();
@@ -153,11 +163,11 @@ class SuperDocClient {
         return introspection.describeContractOperation(params);
     }
     async dispose() {
+        await this.runtime.dispose();
         for (const handle of this.handles.values()) {
             handle.markClosed();
         }
         this.handles.clear();
-        await this.runtime.dispose();
     }
     /** @internal */
     removeHandle(sessionId) {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { type BoundDocApi, type DocCloseBoundParams, type DocCloseResult, type DocFormatApplyBoundParams, type DocFormatApplyResult, type DocOpenParams as GeneratedDocOpenParams, type DocOpenResult, type DocSaveBoundParams, type DocSaveResult } from './generated/client.js';
-import { SuperDocRuntime, type SuperDocClientOptions, type InvokeOptions, type OperationSpec, type RuntimeInvoker } from './runtime/process.js';
+import { SuperDocRuntime, type SuperDocClientOptions, type DocOpenOptions, type InvokeOptions, type OperationSpec, type RuntimeInvoker } from './runtime/process.js';
 /**
  * Wraps a raw runtime and injects a fixed sessionId into every invoke call.
  * Implements RuntimeInvoker so generated code can use it directly.
@@ -64,6 +64,7 @@ export declare class SuperDocClient {
     private readonly rawApi;
     private readonly defaultDocumentRuntime;
     private readonly handles;
+    private readonly pendingSessionIds;
     constructor(options?: SuperDocClientOptions);
     connect(): Promise<void>;
     /**
@@ -73,7 +74,7 @@ export declare class SuperDocClient {
      * automatically. The same file can be opened multiple times with
      * different session ids (useful for diff workflows).
      */
-    open(params: DocOpenParams, options?: InvokeOptions): Promise<SuperDocDocument>;
+    open(params: DocOpenParams, options?: DocOpenOptions): Promise<SuperDocDocument>;
     describe(_params?: Record<string, unknown>, _options?: InvokeOptions): Promise<unknown>;
     describeCommand(params: DocDescribeCommandParams, _options?: InvokeOptions): Promise<unknown>;
     dispose(): Promise<void>;
@@ -93,5 +94,5 @@ export type { GetSystemPromptOptions, GetToolsOptions, GetToolsResult, PresetDes
 export { createAgentToolkit } from './tools.js';
 export type { AgentToolkit, CreateAgentToolkitInput } from './tools.js';
 export { SuperDocCliError } from './runtime/errors.js';
-export type { InvokeOptions, OperationSpec, OperationParamSpec, RuntimeInvoker, SuperDocClientOptions, } from './runtime/process.js';
+export type { CollaborationAuth, DocOpenOptions, InvokeOptions, OperationSpec, OperationParamSpec, RuntimeInvoker, SuperDocClientOptions, } from './runtime/process.js';
 export type { DocOpenResult } from './generated/client.js';

package/dist/index.js

@@ -105,6 +105,7 @@ export class SuperDocClient {
     rawApi;
     defaultDocumentRuntime;
     handles = new Map();
+    pendingSessionIds = new Set();
     constructor(options = {}) {
         this.defaultDocumentRuntime = options.runtime;
         this.runtime = new SuperDocRuntime(options);
@@ -125,18 +126,27 @@ export class SuperDocClient {
             ? { ...params, runtime: this.defaultDocumentRuntime }
             : params;
         const explicitSessionId = openParams.sessionId;
-        if (typeof explicitSessionId === 'string' && this.handles.has(explicitSessionId)) {
-            throw new SuperDocCliError(`Session id already open in this client: ${explicitSessionId}`, {
-                code: 'SESSION_ALREADY_OPEN',
-                details: { sessionId: explicitSessionId },
-            });
+        if (typeof explicitSessionId === 'string') {
+            if (this.handles.has(explicitSessionId) || this.pendingSessionIds.has(explicitSessionId)) {
+                throw new SuperDocCliError(`Session id already open in this client: ${explicitSessionId}`, {
+                    code: 'SESSION_ALREADY_OPEN',
+                    details: { sessionId: explicitSessionId },
+                });
+            }
+            this.pendingSessionIds.add(explicitSessionId);
+        }
+        try {
+            const result = (await this.rawApi.open(openParams, options));
+            const contextId = result.contextId;
+            const boundRuntime = new BoundRuntime(this.runtime, contextId);
+            const handle = new SuperDocDocument(boundRuntime, contextId, result, this);
+            this.handles.set(contextId, handle);
+            return handle;
+        }
+        finally {
+            if (typeof explicitSessionId === 'string')
+                this.pendingSessionIds.delete(explicitSessionId);
         }
-        const result = (await this.rawApi.open(openParams, options));
-        const contextId = result.contextId;
-        const boundRuntime = new BoundRuntime(this.runtime, contextId);
-        const handle = new SuperDocDocument(boundRuntime, contextId, result, this);
-        this.handles.set(contextId, handle);
-        return handle;
     }
     async describe(_params = {}, _options) {
         return describeContract();
@@ -145,11 +155,11 @@ export class SuperDocClient {
         return describeContractOperation(params);
     }
     async dispose() {
+        await this.runtime.dispose();
         for (const handle of this.handles.values()) {
             handle.markClosed();
         }
         this.handles.clear();
-        await this.runtime.dispose();
     }
     /** @internal */
     removeHandle(sessionId) {

package/dist/presets/core.cjs

@@ -392,26 +392,78 @@ async function coreGetCatalog() {
     };
 }
 /**
- * Drop the per-action documentation lines for excluded actions. Entries render
- * as single "- name: ..." lines (the drift-guard test enforces the format), so
- * line-level filtering is deterministic. Prose cross-references elsewhere in
- * the prompt are left alone — a mention costs a few tokens; a full per-action
- * manual for an uncallable action teaches the model to call it.
+ * Sentence boundary: terminal punctuation, whitespace, then something that
+ * plausibly opens a sentence — including lowercase, because prompt sentences
+ * regularly start with an action name ("comment_paragraphs applies ...").
+ * The lookbehind guards keep "e.g."/"i.e." from splitting mid-sentence; a
+ * false split is still safe because kept fragments are rejoined with their
+ * original whitespace, and erring toward MORE splits only narrows what a
+ * mention takes down with it.
+ */
+const SENTENCE_BOUNDARY = /((?<![ei]\.[ge]\.)(?<=[.!?])\s+(?=[A-Za-z"(]))/;
+function mentionsAnyAction(text, excludedActions) {
+    for (const name of excludedActions) {
+        if (new RegExp(`\\b${name}\\b`).test(text))
+            return true;
+    }
+    return false;
+}
+/**
+ * Drop the sentences of one prompt line that mention an excluded action.
+ * Returns null when nothing usable is left, so the caller drops the line.
+ */
+function stripExcludedActionSentences(line, excludedActions) {
+    if (!mentionsAnyAction(line, excludedActions))
+        return line;
+    // split() with a capturing group keeps the inter-sentence whitespace as
+    // separate array elements: even indexes are sentences, odd their separators.
+    const parts = line.split(SENTENCE_BOUNDARY);
+    const kept = [];
+    for (let i = 0; i < parts.length; i += 2) {
+        if (mentionsAnyAction(parts[i], excludedActions))
+            continue;
+        kept.push(parts[i]);
+        if (i + 1 < parts.length)
+            kept.push(parts[i + 1]);
+    }
+    let result = kept.join('').trimEnd();
+    // Losing the first sentence must not lose the bullet marker with it.
+    if (result && /^- /.test(line) && !/^- /.test(result))
+        result = `- ${result}`;
+    // Nothing left beyond the marker means the whole line was about excluded
+    // actions — drop it entirely rather than leaving an empty bullet.
+    return /[a-zA-Z0-9]/.test(result.replace(/^- /, '')) ? result : null;
+}
+/**
+ * Remove excluded actions from the prompt: drop their per-action
+ * documentation lines (entries render as single "- name: ..." lines — the
+ * drift-guard test enforces the format), then drop any remaining sentence
+ * that still mentions one. Guidance prose ("use move_range to relocate a
+ * section") is instruction, not a passing cross-reference: leaving it coaches
+ * the model into calls the schema forbids and dispatch rejects.
  */
 function stripExcludedActionLines(prompt, excludedActions) {
     if (excludedActions.size === 0)
         return prompt;
     return prompt
         .split('\n')
-        .filter((line) => {
+        .map((line) => {
         const match = /^- ([a-z_]+)(?: \/ ([a-z_]+))?:/.exec(line);
         if (!match)
-            return true;
+            return line;
         const names = [match[1], match[2]].filter((n) => Boolean(n));
-        // Drop the line only when EVERY action it documents is excluded (the
-        // paired accept/reject line survives if one side remains callable).
-        return !names.every((name) => excludedActions.has(name));
+        const callable = names.filter((name) => !excludedActions.has(name));
+        // Drop the line only when EVERY action it documents is excluded; a
+        // paired accept/reject line survives if one side remains callable, but
+        // its header keeps only the callable name.
+        if (callable.length === 0)
+            return null;
+        if (callable.length === names.length)
+            return line;
+        return `- ${callable.join(' / ')}:${line.slice(match[0].length)}`;
     })
+        .map((line) => (line === null ? null : stripExcludedActionSentences(line, excludedActions)))
+        .filter((line) => line !== null)
         .join('\n');
 }
 async function coreGetSystemPrompt(options) {

package/dist/presets/core.js

@@ -388,26 +388,78 @@ async function coreGetCatalog() {
     };
 }
 /**
- * Drop the per-action documentation lines for excluded actions. Entries render
- * as single "- name: ..." lines (the drift-guard test enforces the format), so
- * line-level filtering is deterministic. Prose cross-references elsewhere in
- * the prompt are left alone — a mention costs a few tokens; a full per-action
- * manual for an uncallable action teaches the model to call it.
+ * Sentence boundary: terminal punctuation, whitespace, then something that
+ * plausibly opens a sentence — including lowercase, because prompt sentences
+ * regularly start with an action name ("comment_paragraphs applies ...").
+ * The lookbehind guards keep "e.g."/"i.e." from splitting mid-sentence; a
+ * false split is still safe because kept fragments are rejoined with their
+ * original whitespace, and erring toward MORE splits only narrows what a
+ * mention takes down with it.
+ */
+const SENTENCE_BOUNDARY = /((?<![ei]\.[ge]\.)(?<=[.!?])\s+(?=[A-Za-z"(]))/;
+function mentionsAnyAction(text, excludedActions) {
+    for (const name of excludedActions) {
+        if (new RegExp(`\\b${name}\\b`).test(text))
+            return true;
+    }
+    return false;
+}
+/**
+ * Drop the sentences of one prompt line that mention an excluded action.
+ * Returns null when nothing usable is left, so the caller drops the line.
+ */
+function stripExcludedActionSentences(line, excludedActions) {
+    if (!mentionsAnyAction(line, excludedActions))
+        return line;
+    // split() with a capturing group keeps the inter-sentence whitespace as
+    // separate array elements: even indexes are sentences, odd their separators.
+    const parts = line.split(SENTENCE_BOUNDARY);
+    const kept = [];
+    for (let i = 0; i < parts.length; i += 2) {
+        if (mentionsAnyAction(parts[i], excludedActions))
+            continue;
+        kept.push(parts[i]);
+        if (i + 1 < parts.length)
+            kept.push(parts[i + 1]);
+    }
+    let result = kept.join('').trimEnd();
+    // Losing the first sentence must not lose the bullet marker with it.
+    if (result && /^- /.test(line) && !/^- /.test(result))
+        result = `- ${result}`;
+    // Nothing left beyond the marker means the whole line was about excluded
+    // actions — drop it entirely rather than leaving an empty bullet.
+    return /[a-zA-Z0-9]/.test(result.replace(/^- /, '')) ? result : null;
+}
+/**
+ * Remove excluded actions from the prompt: drop their per-action
+ * documentation lines (entries render as single "- name: ..." lines — the
+ * drift-guard test enforces the format), then drop any remaining sentence
+ * that still mentions one. Guidance prose ("use move_range to relocate a
+ * section") is instruction, not a passing cross-reference: leaving it coaches
+ * the model into calls the schema forbids and dispatch rejects.
  */
 function stripExcludedActionLines(prompt, excludedActions) {
     if (excludedActions.size === 0)
         return prompt;
     return prompt
         .split('\n')
-        .filter((line) => {
+        .map((line) => {
         const match = /^- ([a-z_]+)(?: \/ ([a-z_]+))?:/.exec(line);
         if (!match)
-            return true;
+            return line;
         const names = [match[1], match[2]].filter((n) => Boolean(n));
-        // Drop the line only when EVERY action it documents is excluded (the
-        // paired accept/reject line survives if one side remains callable).
-        return !names.every((name) => excludedActions.has(name));
+        const callable = names.filter((name) => !excludedActions.has(name));
+        // Drop the line only when EVERY action it documents is excluded; a
+        // paired accept/reject line survives if one side remains callable, but
+        // its header keeps only the callable name.
+        if (callable.length === 0)
+            return null;
+        if (callable.length === names.length)
+            return line;
+        return `- ${callable.join(' / ')}:${line.slice(match[0].length)}`;
     })
+        .map((line) => (line === null ? null : stripExcludedActionSentences(line, excludedActions)))
+        .filter((line) => line !== null)
         .join('\n');
 }
 async function coreGetSystemPrompt(options) {

package/dist/runtime/embedded-platform.cjs

@@ -4,6 +4,7 @@ var node_fs = require('node:fs');
 var node_module = require('node:module');
 var path = require('node:path');
 var node_url = require('node:url');
+var sdkVersion_generated = require('./sdk-version.generated.cjs');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('runtime/embedded-platform.cjs', document.baseURI).href)));
@@ -50,31 +51,36 @@ function resolveFromPackageLocal(target, binaryName) {
  * Resolve the platform package through Node, and reject a version that is not
  * this SDK's own.
  *
- * `require.resolve` falls back to NODE_PATH, which package managers set to a
- * flat store directory (pnpm does it for every binary shim). A host binary from
- * an unrelated SDK version installed anywhere in that store then satisfies this
- * lookup, and the SDK silently drives a foreign engine: seen in the wild as an
- * SDK 2.2.1 install executing a hoisted 2.0.0 host, which failed operations the
- * matching host performs correctly. optionalDependencies pin the platform
- * package to an exact version, so a mismatch here is never legitimate.
+ * Resolution starts from the installed SDK so pnpm's isolated optional
+ * dependency remains visible after the SDK itself is bundled. `require.resolve`
+ * can also fall back to NODE_PATH, so the version check prevents a host binary
+ * from an unrelated SDK version in a flat store from satisfying this lookup.
+ * optionalDependencies pin the platform package to an exact version, so a
+ * mismatch here is never legitimate.
  */
 function resolveFromPlatformPackage(target, binaryName) {
     const pkg = TARGET_TO_PACKAGE[target];
+    let sdkRequire;
+    try {
+        sdkRequire = node_module.createRequire(require$1.resolve('@superdoc/sdk'));
+    }
+    catch {
+        sdkRequire = require$1;
+    }
     let binaryPath;
     try {
-        binaryPath = require$1.resolve(`${pkg}/bin/${binaryName}`);
+        binaryPath = sdkRequire.resolve(`${pkg}/bin/${binaryName}`);
     }
     catch {
         return null;
     }
     try {
-        const platformVersion = require$1(require$1.resolve(`${pkg}/package.json`)).version;
-        const ownVersion = require$1(node_url.fileURLToPath(new URL('../../package.json', (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('runtime/embedded-platform.cjs', document.baseURI).href))))).version;
-        if (platformVersion !== ownVersion)
+        const platformVersion = sdkRequire(sdkRequire.resolve(`${pkg}/package.json`)).version;
+        if (platformVersion !== sdkVersion_generated.SDK_VERSION)
             return null;
     }
     catch {
-        // Either manifest being unreadable is itself disqualifying: an unverifiable
+        // An unreadable platform manifest is itself disqualifying: an unverifiable
         // host is exactly the case this guard exists to reject.
         return null;
     }

package/dist/runtime/embedded-platform.js

@@ -2,6 +2,7 @@ import { chmodSync, existsSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { SDK_VERSION } from './sdk-version.generated.js';
 const require = createRequire(import.meta.url);
 const TARGET_TO_PACKAGE = {
     'darwin-arm64': '@superdoc/sdk-darwin-arm64',
@@ -46,31 +47,36 @@ function resolveFromPackageLocal(target, binaryName) {
  * Resolve the platform package through Node, and reject a version that is not
  * this SDK's own.
  *
- * `require.resolve` falls back to NODE_PATH, which package managers set to a
- * flat store directory (pnpm does it for every binary shim). A host binary from
- * an unrelated SDK version installed anywhere in that store then satisfies this
- * lookup, and the SDK silently drives a foreign engine: seen in the wild as an
- * SDK 2.2.1 install executing a hoisted 2.0.0 host, which failed operations the
- * matching host performs correctly. optionalDependencies pin the platform
- * package to an exact version, so a mismatch here is never legitimate.
+ * Resolution starts from the installed SDK so pnpm's isolated optional
+ * dependency remains visible after the SDK itself is bundled. `require.resolve`
+ * can also fall back to NODE_PATH, so the version check prevents a host binary
+ * from an unrelated SDK version in a flat store from satisfying this lookup.
+ * optionalDependencies pin the platform package to an exact version, so a
+ * mismatch here is never legitimate.
  */
 function resolveFromPlatformPackage(target, binaryName) {
     const pkg = TARGET_TO_PACKAGE[target];
+    let sdkRequire;
+    try {
+        sdkRequire = createRequire(require.resolve('@superdoc/sdk'));
+    }
+    catch {
+        sdkRequire = require;
+    }
     let binaryPath;
     try {
-        binaryPath = require.resolve(`${pkg}/bin/${binaryName}`);
+        binaryPath = sdkRequire.resolve(`${pkg}/bin/${binaryName}`);
     }
     catch {
         return null;
     }
     try {
-        const platformVersion = require(require.resolve(`${pkg}/package.json`)).version;
-        const ownVersion = require(fileURLToPath(new URL('../../package.json', import.meta.url))).version;
-        if (platformVersion !== ownVersion)
+        const platformVersion = sdkRequire(sdkRequire.resolve(`${pkg}/package.json`)).version;
+        if (platformVersion !== SDK_VERSION)
             return null;
     }
     catch {
-        // Either manifest being unreadable is itself disqualifying: an unverifiable
+        // An unreadable platform manifest is itself disqualifying: an unverifiable
         // host is exactly the case this guard exists to reject.
         return null;
     }